Matthew Garrett

You will find info like this:
Windows secured-core PCs are designed to provide an “On-By-Default” security experience for businesses and users. What this means is that from the moment a user takes the device out of the box and turns it on, businesses can be confident that the machine has protections in place that mitigate
security risks and simplify the end user experience in configuring the device.
/q>

https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RWOXAT

Other secure-core PCs are listed in: https://www.microsoft.com/en-us/windows/business/devices?col=secured-core-pcs